Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
File:                     AyhzUYaXwj6cPjemRrrRISNa10Q.mft (raw, json)
Hash identifier:          nYvhIULmMESSfi3nvwLU3Px4y4QOJ0yU4s6/YbQJ4iY=
Subject key identifier:   04:80:7B:C7:6F:AF:A0:33:4B:9E:62:E4:79:6A:E6:7F:FB:58:2D:C3
Authority key identifier: 03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44
Certificate issuer:       /CN=032873518697c23e9c3e37a646bad121235ad744
Certificate serial:       019922FA7D349E3BCA3928368260330D119C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 07:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:05 +0000
Files and hashes:         1: AyhzUYaXwj6cPjemRrrRISNa10Q.crl (hash: fQisrrXstffn3nTJkpAKrP9QTbeVPrcMK83lnwY96/o=)
                          2: V2K-oZleXeUaxCNtSI8GJz8R-T8.roa (hash: BfQ/+c4yu8OqgDpQuVge6IJ1WfNKM140JuABCwOq8WA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:7d:34:9e:3b:ca:39:28:36:82:60:33:0d:11:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032873518697c23e9c3e37a646bad121235ad744
        Validity
            Not Before: Sep  7 07:01:05 2025 GMT
            Not After : Sep  8 07:01:05 2025 GMT
        Subject: CN=04807bc76fafa0334b9e62e4796ae67ffb582dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:60:23:74:1e:07:98:38:a0:2c:f0:fc:2d:
                    53:72:22:51:ad:e3:7c:85:19:8d:44:0b:d1:16:ed:
                    d7:ec:92:5f:95:0b:8a:af:dd:8d:0f:92:f3:24:ad:
                    df:18:e1:a8:2a:8e:ca:da:bb:4a:bd:d4:b5:a1:cc:
                    e5:c0:59:bd:33:32:01:95:5c:c8:c0:24:9a:00:ad:
                    b1:b3:13:6b:2f:af:bf:34:e7:49:45:0f:29:66:1b:
                    73:c4:47:69:20:b5:ae:47:67:64:01:55:fd:4a:ca:
                    a5:02:38:0a:7d:77:22:5f:27:e7:1e:9b:03:8d:a9:
                    85:93:e8:cc:8d:c0:66:32:ed:df:48:ad:b2:d4:09:
                    71:5c:1b:46:63:44:c4:ec:b1:0e:eb:6e:02:26:a0:
                    8e:1d:06:30:89:5b:8b:e3:ec:b5:38:ed:49:84:05:
                    bb:81:8b:4b:18:8e:02:ca:a5:dc:2d:8e:af:4b:74:
                    c2:c7:97:c1:51:b7:ed:d8:81:30:7b:b2:d2:13:a7:
                    f9:a7:f6:7c:d5:2c:13:1b:fb:9f:35:a7:93:12:c8:
                    cc:9c:7f:02:f1:d4:59:fa:c6:a3:70:3b:51:88:15:
                    5b:59:8f:9b:77:90:ef:70:47:2f:bf:39:4b:ed:2c:
                    e8:8d:97:23:90:5d:07:87:b4:ac:15:8a:cc:71:07:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:80:7B:C7:6F:AF:A0:33:4B:9E:62:E4:79:6A:E6:7F:FB:58:2D:C3
            X509v3 Authority Key Identifier:
                keyid:03:28:73:51:86:97:C2:3E:9C:3E:37:A6:46:BA:D1:21:23:5A:D7:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyhzUYaXwj6cPjemRrrRISNa10Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ebd05e-f607-4bfb-a42b-127008924eed/1/AyhzUYaXwj6cPjemRrrRISNa10Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:d3:82:5d:6d:b4:f4:21:24:00:5c:41:a2:d9:a4:a4:14:
         51:69:91:d5:ae:20:f7:44:24:f2:43:92:da:83:12:9f:be:53:
         68:7e:c2:2e:2e:43:68:54:9d:82:c8:94:24:f0:e1:eb:84:be:
         77:a6:62:b2:07:3b:7c:cf:3f:59:78:5f:08:b6:74:f5:6e:9b:
         1a:9c:67:58:ba:72:a9:58:b7:47:c9:2c:5b:fd:e0:e9:f2:ed:
         cf:d8:7a:47:22:7a:9b:e3:79:a6:29:23:93:03:f0:1c:34:61:
         cb:d4:b8:f6:2a:40:1e:97:89:c8:91:b1:ae:e6:83:9f:7c:b5:
         8c:0c:63:fa:45:4d:06:e7:90:8b:41:c3:2a:9c:82:1b:0b:89:
         66:bc:4d:95:d4:82:fc:17:72:4b:c6:f3:f5:af:90:4c:e5:ba:
         de:4b:fd:03:76:ca:60:9c:77:02:1b:f3:cd:c3:42:ac:82:d7:
         8b:06:39:b2:6f:37:87:a1:59:dc:b6:39:8b:90:7c:95:30:9d:
         73:98:39:c4:7e:03:bf:71:35:9b:a8:7e:d9:cb:9b:a3:ea:aa:
         ab:da:2b:41:85:84:be:c0:09:50:ba:d6:bd:d4:27:8d:2f:ae:
         ab:be:2c:6c:99:13:8c:27:bf:51:8f:50:60:8a:16:e8:eb:04:
         29:50:73:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:40 2025 by rpki-client